27 matches found
CVE-2019-18373
Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access...
EUVD-2020-22014
Malware in sbrugna...
EUVD-2018-15618
Malware in sbrugna...
EUVD-2015-6754
Malware in sbrugna...
EUVD-2018-2048
Malware in sbrugna...
EUVD-2024-36509
Malicious code in bioql PyPI...
CVE-2025-23954
Missing Authorization vulnerability in awcode Salvador – AI Image Generator salvador-ai-image-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salvador – AI Image Generator: from n/a through = 1.0.11...
CVE-2019-13359
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user...
PT-2025-21874 · Unknown · Iop-Apl-Uw Basestation3
Name of the Vulnerable Software and Affected Versions: iop-apl-uw basestation3 versions 3.0.4 and earlier Description: A problem was found in the load qc pickl function of the file basestation3/QC.py, which is affected by deserialization due to the manipulation of the qc file argument. This issue...
CVE-2025-31071
CVE-2025-31071 affects HotStar – Multi-Purpose Business Theme (themeton) up to version 1.4. The issue is a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control. CVSSv3.1 base score is 5.3 (NETWORK, LOW attack complexity, PRIVILEGES REQUIRED: NONE, ...
PT-2025-20654 · Shanghai Bairui Information Technology · Sunloginclient
Name of the Vulnerable Software and Affected Versions: Shanghai Bairui Information Technology SunloginClient version 15.8.3.19819 Description: A critical vulnerability has been found in the library process.dll of the file sunlogin guard.exe, affecting an unknown part. The manipulation leads to an...
PT-2025-17385 · Unknown · Zhenfeng13 My-Bbs
Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-BBS version 1.0 Description: A vulnerability has been found in the software, classified as problematic, affecting unknown code and leading to cross-site request forgery. The attack can be initiated remotely, and the exploit has...
PT-2025-11400 · Totolink · Totolink Ex1800T
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1800T versions 9.1.0cu.2112 B20220316 and earlier Description: A critical issue affects the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to a stack-based buffer...
CVE-2024-53803 WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in brandtoss WP Mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.8.16.0...
PT-2024-8152 · Microsoft · Windows 11 +4
Name of the Vulnerable Software and Affected Versions: Windows Registry versions prior to the fixed version Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Registry, which can be exploited to gain elevated privileges on the system. This vulnerability is...
CVE-2023-35802
IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit...
CVE-2012-5375
creationtimestamp| type| source ---|---|--- 2012-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38132...
PHPizabi 0.8 - notepad_body SQL Injection
PHPizabi 0.8 - notepadbody SQL Injection source: https://www.securityfocus.com/bid/34223/info PHPizabi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...
Aztek Forum 4.0 - 'myadmin.php' Database Dumper
/ Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server: Apache/2.0.50 Ubuntu PHP/4.3.8 X-Powered-By: PHP/4.3...
GetRight 5.2a - '.grs' Skin File Buffer Overflow
GetRight Skin File .grs Buffer Overflow May Let Remote Users Run Arbitrary Code Application: GetRight Headlight Software www.getright.com Author: ATmaCA a remote user can create a malicious skin file .grs that, when loaded by the target user, will trigger a buffer overflow in DUNZIP32.DLL 4.0.0.3...